CucumberStudio vs Veracode comparison

Read 208 Veracode reviews

30,728 Views
5,224 Comparison Views

89% willing to recommend

CucumberStudio

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between CucumberStudio and Veracode based on real PeerSpot user reviews.

Find out in this report how the two Dynamic Application Security Testing (DAST) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed CucumberStudio vs. Veracode Report (Updated: September 2026).

CucumberStudio vs. Veracode

Download the complete report

Helped 915,287 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

CucumberStudio

Ranking in Dynamic Application Security Testing (DAST)

13th

Average Rating

8.0

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

Rapid Application Development Software (25th)

Veracode

Ranking in Dynamic Application Security Testing (DAST)

1st

Average Rating

8.0

Reviews Sentiment

6.9

Number of Reviews

208

Ranking in other categories

Application Security Tools (3rd), Static Application Security Testing (SAST) (3rd), Container Security (13th), Software Composition Analysis (SCA) (2nd), Static Code Analysis (1st), Application Security Posture Management (ASPM) (3rd)

Mindshare comparison

As of October 2026, in the Dynamic Application Security Testing (DAST) category, the mindshare of CucumberStudio is 1.6%, up from 0.3% compared to the previous year. The mindshare of Veracode is 13.5%, down from 24.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Dynamic Application Security Testing (DAST) Mindshare Distribution
Product	Mindshare (%)
Veracode	13.5%
CucumberStudio	1.6%
Other	84.9%

Dynamic Application Security Testing (DAST)

Featured Reviews

Walter Wirch

Technical Expert at Bertelsmann SE & Co.

Facilitates integration of test scenarios while needing modernization of components

CucumberStudio is primarily used for designing test scenarios and automating testing. We have implemented it in conjunction with our own routines for integration into our infrastructure CucumberStudio aligns with our strategy for data-driven testing. It supports our product owners in designing…

Read full review

Yash Shende

Software Development Engineer II at Rocket Software

Monthly scans have provided baseline security but still miss critical vulnerabilities

Veracode can improve to stand in this market. They do not have to do much; they just need to improve their UI experience and add more documentation within the application rather than just creating documentation pages on different websites. They need to ensure their web application guides whoever uses it. Since whoever uses Veracode must be a technical person, they just need to guide them to the actual points. They can also improve their security capabilities by adding more filters to identify what vulnerabilities their application has. They need to improve their scanning engine to scan for more critical defects. Also, the integration part can be enhanced by adding features to integrate with a CLI, such as introducing a CLI version or a Jenkins plugin. If such features exist, they should show it as a pop-up, signaling that they have a new feature. Currently, it feels Veracode from two years ago is still the same, so that is something Veracode needs to improve. They can improve the security part. Some of the severe security issues were never caught by Veracode in the reports. In fact, I have never seen any high or critical severity issues pop up in my Veracode report. That is one thing they can improve on their scanning ability to catch high severity issues. Next is integration; Veracode does not provide any tools to integrate with Jenkins or CLI. I do not even know if there is any CLI for Veracode that I can use to automate in my pipeline. The last thing is the UI interface that they have, as it is a bit confusing. I remember we did not have the capability to handle authentications of our internal application. We had to write Selenium code using a Selenium IDE. To write a Selenium script for a Veracode scan, you have to download a Selenium IDE, record it, and then paste that file into Veracode. I can see that Selenium IDE is already decommissioned, so it is no longer used by anyone. Still, we have to use it because Veracode only supports that kind of file for Selenium to automate. They can add more ways to authenticate our application using normal JavaScript or Python or Shell script. I feel these are the four main points. They can document it more by adding tooltips into the application that explain why a parameter is required and what other options are available. For the same example with the Selenium script, they can add a link to their documentation that explains what other kinds of scripts can be written for authentication. I feel they can also make the UI more intuitive so that whoever uses it can guide themselves, as whoever uses Veracode is already a technical person.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Integration with automation frameworks, keywords, and tags allows for saving time writing test cases and implementing automation."

"The solution is stable."

"Hiptest is a great test management tool for agile teams."

"The most valuable feature is the re-usability of action words."

"CucumberStudio aligns with our strategy for data-driven testing."

"The data table that helps in converting a single script to multiple test cases is very helpful."

"The most valuable feature of CucumberStudio is its use of action words, which allows me to avoid writing test cases from scratch for the most common scenarios."

"The power of Hiptest is its test cases and campaign management."

More CucumberStudio pros

"I like the sandbox, the ability to upload compiled code, and how easy it is."

"The valuable features are the static analysis and the dynamic analysis."

"The dashboards and the threat insights it provides are very good. The dashboards are intuitive and pretty straightforward, but also pretty detailed."

"The most valuable feature is the remediation consulting that they give. I feel like any vendor can identify the flaws but fixing the flaws is what is most important. Being able to have those consultation calls, schedule them in the platform, and have that discussion with an applications expert, that process scales well and that is what has allowed a lot more reduction of risk to happen."

"It changes the DevSecOps process because we find flaws much earlier in the development life cycle, and we also spot third-party software that we don't allow on developers' machines."

"When we expanded our definition of critical systems to include an internal application to be scanned by Veracode, we had initial scans that produced hundreds of vulnerabilities. We expected this, based on how the code was treated previously, but the Veracode platform allowed us to streamline our identification of these items and develop a game plan to quickly address them."

"Veracode can emulate the most sophisticated attack and create unique or specific use cases around automatic penetration testing."

"Veracode Fix is a new feature that functions similarly to auto-remediation for low or medium flaw codes."

More Veracode pros

Cons

"It needs some improvement when exporting scenarios into automation code, to make it easier to manage the repeatable action words and tests."

"The reporting needs to be improved."

"I think it would be better if we could also do the reporting with CucumberStudio."

"Another kind of deployment might be useful, perhaps an option to install the tool in a local deployment."

"I would like to see better customer support."

"Copy-pasting something directly from JIRA requires too much modification and formatting."

"More tutorials and examples."

"The reporting and metrics can be improved. E.g.: If we wanted to have metrics across all projects."

More CucumberStudio cons

"The security labs integration has room for improvement."

"Veracode can be improved in terms of software composition analysis and related vulnerabilities."

"I would love to be able to do a dynamic sandbox scan. I think that that would allow us to really get a lot more buy-in from the software development teams."

"From what we have seen of Veracode's SCA offering, it is just average."

"They should improve on the static scanning time."

"The solution could improve the Dynamic Analysis Security Testing(DAST)."

"I would like Veracode to add more language support."

"Improving sorting through findings reports to filter by only what is critically relevant will help developers focus on issues."

More Veracode cons

Pricing and Cost Advice

Information not available

"To my knowledge, licensing for Veracode Static Analysis is paid yearly by my company."

"The price of Veracode Static Analysis is expensive. There is an annual fee to use the solution and the company is upfront with the pricing model and fees."

"The pricing is a bit high."

"The pricing is reasonable compared to other tools."

"Veracode is expensive. Some of its products are expensive. I don't think it's way more expensive than its competitors. The dynamic is definitely worth it, as I think it's cheaper than the competitors. The static scan is a little bit more expensive, around 20 percent more expensive. The manual pen test is more expensive, but it is an expensive service because it's a manual pen test and we also do retests. I don't think it is way more expensive than the competitors, but it's about 15 to 20 percent more expensive."

"Licensing cost is on a yearly basis and there are no additional costs, the pricing is straightforward."

"Its cost for what we needed it for was too high. It wasn't too high for other companies and it was competitively priced, but for us, it just didn't fit. We did plan to use it and increase the usage. In the end, it may have been abandoned because of the cost, but I'm not a hundred percent sure. So, even though we had planned on using it more and more, because of the cost and the business conditions of things, we didn't have the opportunity to really use it more."

"The solution is expensive."

More Veracode pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Dynamic Application Security Testing (DAST) solutions are best for your needs.

See recommendations

915,287 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Comms Service Provider

18%

Construction Company

15%

Manufacturing Company

13%

Financial Services Firm

10%

Financial Services Firm

14%

Manufacturing Company

12%

Outsourcing Company

Computer Software Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	3
Midsize Enterprise	3
Large Enterprise	4

By reviewers
Company Size	Count
Small Business	70
Midsize Enterprise	46
Large Enterprise	114

Questions from the Community

What needs improvement with Hiptest?

CucumberStudio's API integration could be improved both in terms of reliability and design. The API requires data to be sent in a specific format, which takes time to build. Additionally, the repor...

What is your primary use case for Hiptest?

I use CucumberStudio as a test case repository. All of our test cases are stored there. It is also part of our test planning process. For every sprint, we plan the test cases in CucumberStudio and ...

What advice do you have for others considering Hiptest?

For teams following a BDD style software development approach, CucumberStudio is a great collaborative tool that covers all the basic requirements of a test management tool. I would rate CucumberSt...

Which gives you more for your money - SonarQube or Veracode?

SonarQube is easy to deploy and configure, and also integrates well with other tools to do quality code analysis. SonarQube has a great community edition, which is open-source and free. Easy to use...

What is the biggest difference between Veracode and Checkmarx?

According to my experience of using both the tools in different organizations Veracode is a Cloud-native, managed AppSec platform with strong focus on ease of use, it is SaaS delivery, and provide...

What is your experience regarding pricing and costs for Veracode Static Analysis?

My experience with pricing, setup cost, and licensing for Veracode is that it is fairly moderate.

Aikido Security vs CucumberStudio

Comparisons

Compared 11% of the time

GitHub CoPilot vs CucumberStudio

Compared 9% of the time

IBM Cloud Pak for Applications vs CucumberStudio

Compared 9% of the time

Continuous Dynamic (formerly WhiteHat Dynamic) vs CucumberStudio

Compared 6% of the time

Tricentis Tosca vs CucumberStudio

Compared 5% of the time

More CucumberStudio Competitors

SonarQube vs Veracode

Compared 5% of the time

Checkmarx One vs Veracode

Compared 5% of the time

HCL AppScan vs Veracode

Compared 3% of the time

Invicti vs Veracode

Compared 3% of the time

GitLab vs Veracode

Compared 2% of the time

More Veracode Competitors

Product Reports

Rapid Application Development Software

Download CucumberStudio product report

Download Veracode product report

Also Known As

Hiptest

Crashtest Security , Veracode Detect

Overview

CucumberStudio enhances software testing with BDD-style Gherkin syntax, supporting code integration and data-driven testing, streamlining test management for agile teams.

CucumberStudio facilitates effective test management through robust features, promoting re-usability of action words and seamless third-party collaborations. It integrates smoothly with JIRA and other frameworks, simplifying processes with its intuitive interface. Scenarios and test runs boost testing speed and execution efficiency. However, improvements in JIRA conversion, API integration, and reporting are needed, alongside enhanced support for global users and expanded deployment options. Users find the framework beneficial for tracking user stories with comprehensive test coverage while automating scenarios for mobile and software applications. Planning and documenting tests become seamless as it aligns with project management tools.

What are the standout features?

Re-usability of Action Words: Streamlines test creation by using pre-defined actions across scenarios.
Data Tables: Facilitates efficient data handling for comprehensive testing.
Code Integrations: Ensures seamless connections with existing codebases and APIs.
BDD-Style Gherkin Syntax: Enhances clarity and management of tests.
Unlimited Read-Only Accounts: Allows widespread access for engineers and managers without additional costs.
Integration with JIRA: Links testing processes with project tracking tools for efficient management.
Data-Driven Testing Support: Strengthens the testing process by using varied datasets.

Why consider CucumberStudio for testing?

Enhanced Productivity: User-friendly interface and robust features streamline test management.
Improved Collaboration: Seamless integration with third-party tools promotes teamwork.
Accelerated Testing: Scenarios and test runs enable faster execution and feedback loops.
Cost-Effective Access: Unlimited read-only accounts maximize participation without extra expense.
Comprehensive Coverage: Supports behavior-driven development for thorough testing.

CucumberStudio is widely applied for tracking user stories and ensuring aligned test coverage in industries utilizing BDD frameworks. It facilitates seamless automation of test scenarios within mobile and software development, fostering efficient integration with infrastructure routines, thus supporting comprehensive project management and execution.

SmartBear

Veracode is a leading provider of application security solutions, offering tools to identify, mitigate, and prevent vulnerabilities across the software development lifecycle. Its cloud-based platform integrates security into DevOps workflows, helping organizations ensure that their code remains secure and compliant with industry standards.

Veracode supports multiple application security testing types, including static analysis (SAST), dynamic analysis (DAST), software composition analysis (SCA), and manual penetration testing. These tools are designed to help developers detect vulnerabilities early in development while maintaining speed in deployment. Veracode also emphasizes scalability, offering features for enterprises that manage a large number of applications across different teams. Its robust reporting and analytics capabilities allow organizations to continuously monitor their security posture and track progress toward remediation.

What are the key features of Veracode?

Static Analysis (SAST) - Scans source code for vulnerabilities before deployment.
Dynamic Analysis (DAST) - Examines applications in a running state to detect flaws in real-time.
Software Composition Analysis (SCA) - Identifies risks in open-source libraries and third-party components.
Manual Penetration Testing - Offers expert analysis for more complex vulnerabilities.
Integrations with DevOps tools - Seamlessly integrates with CI/CD pipelines for automated security checks.

What benefits should users consider in Veracode reviews?

Early detection of vulnerabilities - Helps developers fix security issues early in the development process.
Scalability - Supports organizations with large-scale application portfolios.
Compliance support - Ensures applications meet various security standards and regulations.
Developer training - Provides tools for educating developers on secure coding practices.
Comprehensive reporting - Offers detailed reports that track remediation and risk trends.

Veracode is widely adopted in industries like finance, healthcare, and government, where compliance and security are critical. It helps these organizations maintain strict security standards while enabling rapid development through its integration with Agile and DevOps methodologies.

Veracode helps businesses secure their applications efficiently, ensuring they can deliver safe and compliant software at scale.

Sample Customers

Cisco, Cardinal Health, Intuit, Smartbox, Accenture, Deliveroo

Manhattan Associates, Azalea Health, Sabre, QAD, Floor & Decor, Prophecy International, SchoolCNXT, Keap, Rekner, Cox Automotive, Automation Anywhere, State of Missouri and others.

CucumberStudio vs. Veracode